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IN THE CLAIMS : 

Please amend the claims as indicated below. 

1 . (Previously Presented) A method for compressing a Rabin signature, s, for a user 
5 having a public key, n, comprising the step of: 

generating a compressed Rabin signature based on a continued fraction expansion 
of s/n, wherein said continued fraction expansion of s/n further comprises the steps of 

computing principal convergents, Uj/vi, for i equal to 1 to k, of a continued 
fraction expansion of s/n, where k is a largest integer for which principal convergents are 
10 defined; 

establishing an index /, such that v/ < 4n < v /+ i; and 

generating a compressed Rabin signature (v/, m) for a message, m. 

2. (Cancelled) 

15 

3. (Original) A method for compressing a Rabin signature, s, for a message, m, and a 
user having a public key, n, comprising the steps of: 

computing principal convergents, Uj/vj, of a continued fraction expansion of s/n; 
establishing an index /, such that v/ < 4n < v/+i; and 
20 generating a compressed Rabin signature (v/, m). 

4. (Original) The method according to claim 3, wherein sv=u (mod n). 

5. (Original) The method according to claim 3, wherein v 

25 

6. (Original) The method according to claim 3, wherein \u\ 

7. (Original) The method according to claim 1, wherein said principal convergents, 
Ui/vj, are computer for i equal to 1 to k, where k is a largest integer for which principal 

30 convergents are defined. 



-2- 



Bleichenbacher 5 
Confirmation No. 7709 

8. (Original) A method for decompressing a compressed Rabin signature (v, m) for a 
message, m, and user having a public key, n, comprising the steps of: 

applying a message formatting function, h, to the message, m, to computing h(m); 
computing a value, t, as h(m)v 2 mod n; 
5 obtaining a value, w, as a square root of the value, t; 

computing a signature value, s, as w/v mod n; and 
providing a decompressed signature (s,m). 

9. (Original) The method of claim 8, further comprising the step of generating an 
10 error if no integer square root exists. 

10. (Original) A method for compressing an RSA signature, s, for a message, m, and 
a user having a public key (n, e), comprising the steps of: 

computing principal convergents, Uj/v;, of the continued fraction expansion of s/n; 
15 establishing an index 1, such that v, < « (1 " 1/e) <v M ; and 

generating a compressed signature (vi, m). 

1 1 . (Original) A method for decompressing a RSA signature (v, m) for a message, m, 
and a user having a public key (n, e), comprising the steps of: 

20 applying a message formatting function, h, to the message, m, to computing h(m); 

computing a value, t, as h(m)v e mod n; 

determining whether the values t or t-n have an e th root over integer values; 

computing a value, w, as the e th root; and 

computing the decompressed signature (w/v mod n, m). 

25 

12. (Original) The method of claim 11, further comprising the step of generating an 
error if no e th root exists. 

13. (Previously Presented) A system for compressing a Rabin signature, s, for a user 
30 having a public key, n, comprising: 

a memory; and 
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at least one processor, coupled to the memory, operative to: 

generate a compressed Rabin signature based on a continued fraction expansion 

of s/n, wherein said processor is further configured to perform said continued fraction expansion 

of s/n by: 

5 computing principal convergents, Ui/vj, for i equal to 1 to k, of a continued 

fraction expansion of s/n, where k is a largest integer for which principal convergents are 
defined; 

establishing an index /, such that v/ < 4n < v /+ i; and 

generating a compressed Rabin signature (v/, m) for a message, m. 

10 

14. (Cancelled) 

15. (Original) A system for decompressing a compressed Rabin signature (v, m) for a 
message, m, and user having a public key, n, comprising: 

15 a memory; and 

at least one processor, coupled to the memory, operative to: 

apply a message formatting function, h, to the message, m, to computing h(m); 

compute a value, t, as h(m)v 2 mod n; 

obtain a value, w, as a square root of the value, t; 
20 compute a signature value, s, as w/v mod n; and 

providing a decompressed signature (s,m). 

16. (Original) The system of claim 15, wherein said processor is further configured to 
generate an error if no integer square root exists. 

25 
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